Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json)
Hash identifier: RM6ThdYiQ8xWbDJQ9W78LVfwnrmsQBQuV5zgUU915OM=
Subject key identifier: 6C:8B:4C:FB:6F:A5:9D:18:9B:EB:73:73:DE:4F:33:75:B7:40:A0:7F
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D5231CA61E7CA09E1A0850
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 199.91.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:1c:a6:1e:7c:a0:9e:1a:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=66999d72-e822-4d1a-bb5c-11b2bf1975e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:b3:52:d7:33:2e:9e:4b:96:86:5b:87:4a:
e9:99:02:a2:30:c8:66:6f:a3:44:be:ef:66:b3:cc:
4f:48:e1:87:6b:67:6a:5c:63:b6:6f:bc:8a:ed:ab:
8a:2a:15:e0:8f:30:ef:85:76:8d:6a:0f:94:3d:bf:
19:35:7a:3a:b7:7d:60:01:45:3e:3b:74:f5:14:11:
02:49:5a:df:9c:10:6c:8b:b1:05:6a:de:83:87:e0:
9a:39:96:c5:b2:8e:d8:9b:1e:48:1e:ee:ea:78:d8:
b3:4f:a7:77:4a:cf:2e:a3:df:64:84:37:8e:f3:38:
71:f5:61:88:be:1a:64:ca:82:b3:b5:67:6d:2e:d4:
d7:78:a8:64:70:2a:1c:bc:db:15:e0:ff:b3:ad:dd:
76:7b:7f:c0:07:45:83:5a:ef:2d:f6:3e:3f:b1:28:
f6:60:c4:18:a8:ff:f7:6d:26:5d:c5:db:de:30:6c:
ca:39:6d:1a:ea:e6:60:d7:24:65:46:04:05:aa:31:
68:0d:fe:3e:5b:9f:22:55:2a:81:53:63:2f:a4:72:
57:3a:de:dd:f1:ab:5f:21:f3:f3:65:a9:87:b6:b4:
15:47:10:c5:79:50:aa:90:ca:26:ba:17:42:88:c3:
94:b2:26:76:ba:a1:01:54:6a:ed:c4:94:1b:ab:c9:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:4C:FB:6F:A5:9D:18:9B:EB:73:73:DE:4F:33:75:B7:40:A0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1b:c5:07:18:2c:16:60:fa:df:c1:46:5b:58:4f:6b:5c:c9:
8b:fa:cd:98:1d:41:2b:8f:56:21:0c:58:90:04:cd:3d:65:50:
07:4c:14:f0:ca:d5:dd:cf:68:c2:ce:68:32:b3:04:ee:9d:48:
ba:2b:f2:fe:f6:a4:62:9c:44:47:a3:54:ee:19:ee:ac:d2:cc:
cf:d2:ec:68:cf:36:a5:e0:59:76:bc:5a:90:34:5f:3c:75:45:
a5:57:0d:0b:03:48:82:72:6f:a7:bb:ee:a2:17:3d:49:e9:42:
89:08:53:7b:63:a4:cd:7c:f0:1d:c3:b0:c7:8b:66:1a:96:6a:
dc:b6:ca:d3:3d:22:06:33:55:c4:33:2e:c4:6c:cf:15:eb:e3:
a1:e6:d6:72:b1:8d:b8:77:d9:c8:75:23:7a:6e:e5:e5:5a:2c:
87:a7:82:ac:db:7d:98:04:8b:6f:52:0e:43:33:c6:49:bd:02:
41:3e:36:23:d0:1e:03:2c:b1:1b:62:9e:57:6b:2b:8c:0f:7b:
ed:6b:77:00:14:5c:c7:a0:89:5d:6d:9a:f5:8e:2f:fc:e4:9a:
ab:80:33:85:fb:fb:f2:d6:55:33:17:5b:26:f6:b8:80:bf:e5:
50:70:01:5d:a4:b6:58:4f:cc:77:2a:3f:9d:85:1a:ab:15:38:
a8:bc:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:53 2025 by rpki-client